Novell LINUX ENTERPRISE DESKTOP 10 SP2 - DEPLOYMENT GUIDE 08-05-2008 Deployment Manual page 228

9.3.20 PAM Configuration
New Configuration Files (containing comments for more information)
common-auth
Default PAM configuration for auth section
common-account
Default PAM configuration for account section
common-password
Default PAM configuration for password changing
common-session
Default PAM configuration for session management
You should include these default configuration files from within your application-spe-
cific configuration file, because it is easier to modify and maintain one file instead of
the approximately forty files that used to exist on the system. If you install an application
later, it inherits the already applied changes and the administrator is not required to re-
member to adjust the configuration.
The changes are simple. If you have the following configuration file (which should be
the default for most applications):
#%PAM-1.0
auth
account
password required
password required
#password required
session required
you can change it to:
#%PAM-1.0
auth
account
password include
session
212 Deployment Guide
required pam_unix2.so
required pam_unix2.so
pam_pwcheck.so
pam_unix2.so
pam_make.so
pam_unix2.so
include common-auth
include common-account
common-password
include common-session
use_first_pass use_authtok
/var/yp